Re: CSP: Minimum cipher strength from Frederik Braun on 2014-09-09 (public-webappsec@w3.org from September 2014)

From: Frederik Braun <fbraun@mozilla.com>
Date: Tue, 09 Sep 2014 11:03:07 +0200
To: public-webappsec@w3.org
Message-ID: <540EC24B.4060105@mozilla.com>

On 08.09.2014 22:54, Erlend Oftedal wrote:
> Hi
> 
> Reading the chapter this blog
> post http://marc.durdin.net/2014/09/risks-with-third-party-scripts-on-internet-banking-sites/ made
> me think about the problem of using third party scripts where the
> SSL/TLS is poorly configured, and how we could deal with that.

You can reduce the risk of trusting third party scripts with
http://www.w3.org/TR/SRI/ ;-)

Received on Tuesday, 9 September 2014 09:03:38 UTC